InBoxRevenge KS Forum

http://krebsonsecurity.com/2011/11/malware-click-fraud-kingpins-arrested-in-estonia/
‘Biggest Cybercriminal Takedown in History’

http://garwarner.blogspot.com/2011/11/operation-ghost-click-dnschanger.html
Operation Ghost Click: DNSChanger Malware Ring Dismantled

http://blog.trendmicro.com/esthost-taken-down-%E2%80%93-biggest-cybercriminal-takedown-in-history/
On November 8, a long-living botnet of more than 4,000,000 bots was taken down by the FBI and Estonian police in cooperation with Trend Micro and a number of other industry partners.

http://www.fbi.gov/news/stories/2011/november/malware_110911/malware_110911
FBI Press Release, 11/9/11

These people were arrested in Estonia:

Vladimir Tsastsin (31)
Andrey Taame (31) Russian, at large
Timur Gerassimenko (31)
Dmitri Jegorov (33)
Valeri Aleksejev (31)
Konstantin Poltev (28)
Anton Ivanov (26)

This also ties back to the disgraced Registrar, ESTDomains.

Great news! I was very happy to see this happen. Who knew all of this had been in the works the past few years? I nearly forgot about Estdomains, the "Joe Paterno" of Registrars (too soon?)

They were a very common result in most WHOIS queries of malicious sites back in the day.

Just saw those headlines online, great news.

This is great, great news.

SiL

The indictment is a good read. It has a simple explanation with illustrations of

Click hijacking
Advert replacement
Anti-virus blocking
DNS Changer malware